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IN THE CLAIMS: 
Amended claims follow: 

1 . (Currently Amended) A system for management of a network of 
devices and resources available to the devices via a computer network, 
comprising: 

a network directory defining a hierarchical tree structure containing 
nodes corresponding to the network of devices and defining control settings 
corresponding to and to be enforced upon the resources available to the devices; 

a directory server in communication with the network directory to 
facilitate accessing data from and storing data to the network directory, the data 
relating to the nodes of the hierarchical tree structure corresponding to the devices 
and to the control settings corresponding to the resources; and 

an end node corresponding to each device in the network of devices 
and resources corresponding to the device, the end node being in communication 
with the directory server and the resources corresponding to the device, the end 
node being adapted to enforce the control settings corresponding to the resources 
contained in the network directory, 

wherein the control settings corresponding to the resources of each 
device are selectively inherited down the hierarchical tree structure of the network 
directory and wherein the control settings are determined at each end node, 

wherein a management console is in communication with the 
network directory and the directory server for providing a user interface, the ' 
management console being adapted to selectively display the hierarchical tree 
structure and the control settings stored in the network directory, 
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wherein at least one control setting is a scheduled task and wherein 
the end node causes performance of the task when the scheduled task is to be 
performed, 

wherein the scheduled task is an anti-virus-related taskj 
wherein further included is a get policy component that obtains 
relevant policies, a first cache for caching an output of the get policy component 
and a calculate policy component that calculates an inheritance with the output 
received from the first cache and transmits the inheritance to a second cache, 
wherein the information in the first cache is updated based on a time stamping; 

wherein broad control settings are set higher in the hierarchical tree 
structure while lower level control settings are set at a level of one of the devices . 

2. (Cancelled) 

3. (Original) The system for management of a network of devices and 
resources via a computer network according to claim 1, wherein the end node 
dynamically calculates the control setting of the selected node by reading the 
control settings of nodes along a path of nodes from a root of the hierarchical tree 
structure down to the selected node and wherein the end node overwrites 
previously written control settings upon reading conflicting control settings at 
each node along the path of nodes. 

4. (Original) The system for management of a network of devices and 
resources via a computer network according to claim 1, wherein the end node 
dynamically calculates the control setting by reading from the control settings of 
the end node up to the control settings of a root of the hierarchical tree structure. 
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5. (Previously Amended) The system for management of a network of 
devices and resources via a computer network according to claim 1, wherein each 
control setting includes a configuration rule and the scheduled task. 

6. (Cancelled) 

7. (Currently Amended) A method for management of a network of 
devices and resources available to the devices via a computer network, 
comprising: 

for each device of the network of devices, calculating control 
settings to be enforced by the device upon the resources corresponding to the 
device, 

wherein the calculating is performed by the device by accessing data 
stored in a network directory defining a hierarchical tree structure containing 
nodes, each node corresponding to a device of the network of devices and 
defining control settings corresponding to and to be enforced upon the resources 
available to the corresponding device and wherein the control settings 
corresponding to the resources of each device are selectively inherited down the 
hierarchical tree structure of the network direct ory, 

wherein the hierarchical tree structure and the control settings stored 
in the network directory for one of the devices are selectively displayed by a 
management console, the management console being in communication with the 
network directory and the directory server, the management console providing a 
user interface at the corresponding device, 

wherein when the control setting is a scheduled task, further 
comprising causing performance of the task by the end node when the scheduled 
task is to be performed, 
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wherein the scheduled task is an an ti -virus-related task; 

wherein further included is a get policy component that obtains 
relevant policies, a first cache for caching an output of the get policy component, 
and a calculate policy component that calculates an inheritance with the output 
received from the first cache and transmits the inheritance to a second cache, 
wherein the information in the first cache is updated based on a time stamping 

wherein broad control settings are set higher in the hierarchical tree 
structure while lower level control settings are set at a level of one of the devices . 

8. (Original) The method for management of a network of devices and 
resources via a computer network according to claim 7, further comprising 
enforcing the control settings by the device upon the resources available to the 
device. 

9. (Cancelled) 

1 0. (Previously Amended) The method management of computer 
application via a computer network according to claim 8, further comprising 
dynamically calculating the control settings of a selected node of the hierarchical 
tree structure by the device. 

1 1 . (Original) The method management of computer application via a 
computer network according to claim 10, wherein the dynamic calculating 
includes reading control settings of nodes along a path of nodes from a root of the 
hierarchical tree structure down to the selected node and overwriting previously 
written control settings. upon reading conflicting control settings at each node 
along the path of nodes. 
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12. (Original) The method management of computer application via a 
computer network according to claim 10, wherein the dynamic calculating 
includes reading control settings of nodes along a path of nodes from the control 
setting of the selected node up to the control settings of a root of the hierarchical 
tree structure. 

13. (Previously Amended) The method of management of a network of 
devices and resources via a computer network according to claim 7, wherein each 
control setting includes a configuration rule and the scheduled task. 

14. (Cancelled) 

15. (Original) A method for management of a network of devices and 
resources via a computer network according to claim 7, further comprising 
selectively transmitting data from a software repository of the directory server to 
the device. 

1 6. (Currently Amended) A computer program product for management 
of a network of devices and resources available to the devices via a computer 
network, comprising: 

for each device of the network of devices, computer code that 
calculates control settings to he enforced by the device upon the resources 
corresponding to the device, wherein the calculating is performed by the device by 
accessing data stored in a network directory defining a hierarchical tree structure 
containing nodes, each node corresponding to a device of the network of devices 
and defining control settings corresponding to and to be enforced upon the 
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resources available to the corresponding device and wherein the control settings 
corresponding to the resources of each device are selectively inherited down the 
hierarchical tree structure of the network directory; and 

a computer readable medium that stores said computer codes, 

wherein the hierarchical tree structure and the control settings stored 
in the network directory are selectively displayed via a user interface, 

wherein when the control setting is a scheduled task, further 
comprising computer code that causes performance of the task by the end node 
when the scheduled task is to be performed, 

wherein the scheduled task is an anti-virus-related task; 

wherein further included is a get policy component that obtains 
relevant policies, a first cache for caching an output of the get policy component, 
and a calculate policy component that calculates an inheritance with the output 
received from the first cache and transmits the inheritance to a second cache, 
wherein the information in the first cache is updated based on a time stamping; 

wherein broad control settings are set higher in the hierarchical tree 
structure while lower level control settings are set at a level of one of the devices . 

17. (Original) The computer program product for management of a 
network of devices and resources via a computer network according to claim 16, 
further comprising computer code that enforces the control settings upon the 
corresponding device and resources available to the device. 

18. (Cancelled) 

1 9. (Previously Amended) The computer program product for 
management of a network of devices and resources via a computer network 
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according to claim 16, further comprising computer code that dynamically 
calculates the control setting of a selected node of the hierarchical tree structure 
by the corresponding device. 

20. (Original) The computer program product for management of a 
network of devices and resources via a computer network according to claim 19, 
wherein the computer code that dynamically calculates includes computer code 
that reads control settings of nodes along a path of nodes from a root of the 
hierarchical tree structure down to the selected node and computer code that 
overwrites previously written control settings upon reading conflicting control 
settings at each node along the path of nodes. 

21 . (Original) The computer program product for management of a 
network of devices and resources via a computer network according to claim 19, 
wherein the computer code that dynamically calculates includes computer code 
that reads control settings of nodes along a path of nodes from the control settings 
of the selected node up to the control settings of a root of the hierarchical tree 
structure. 

22. (Previously Amended) The computer program product for 
management of a network of devices and resources via a computer network 
according to claim 16, wherein each control setting includes a configuration rule 
and the scheduled task. 

23. (Cancelled) 

24. (Original) The computer program product for management of a 
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network of devices and resources via a computer network according to claim 1 6, 
further comprising computer code that selectively transmits data from a software 
repository of the directory server to the device via the end node corresponding to 
the device. 

25. (Currently Amended) A computer program product for management 
of a network of devices and resources available to the devices via a computer 
network, comprising: 

computer code that contains a network directory defining a 
hierarchical tree structure containing nodes corresponding to the network of 
devices and defining control settings corresponding to and to be enforced upon the 
resources available to the devices; 

computer code that facilitates communication between a directory 
server and the network directory to facilitate accessing data from and storing data 
to the network directory, the data relating to the nodes of the hierarchical tree 
structure corresponding to the devices and to the control settings corresponding to 
the resources; 

computer code that facilitates communication between the device 
and the directory server and the resources corresponding to the device, the device 
computer code being adapted to enforce the control settings corresponding to the 
resources contained in the network directory, wherein the control settings 
corresponding to the resources of each device are selectively inherited down the 
hierarchical tree structure of the network directory; and 

a computer readable medium that stores said computer codes, 
wherein the hierarchical tree structure and the control settings stored 
in the network directory are selectively displayed, and computer code that 
selectively displays is in communication with the network directory and the 
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directory server and provides a user interface, 

wherein when the control setting is a scheduled task, further 
comprising computer code that causes performance of the task by the end node 
when the scheduled task is to be performed, 

wherein the scheduled task is an anti-virus-related task; 

wherein further included is a get policy component that obtains 
relevant policies, a first cache for caching an output of the get p olicy component. 
and a calculate policy component that calculates an inheritance with the output 
received from the first cache and transmits the inheritance to a second cache, 
wherein the information in the first cache is updated based on a time stamping: 

wherein broad control settings are set higher in the hierarchical tree 
structure while lower level control settings are set at a level of one of the devices . 

26. (Cancelled) 

27. (Currently Amended) The system for management of a network of 
devices and resources via a computer network according to claim 261., wherein the 
broad control settings require the scanning of all executable files for viruses, 
cleaning of the files if possible, quarantining of the files if the files can not be 
cleaned upon detecting a virus, and sending infection reports to a network 
administrator. 

28. (Previously Presented) The system for management of a network of 
devices and resources via a computer network according to claim 27, wherein a 
mid-level control setting is set to report all infections to a local administrator. 

29. (Previously Presented) The system for management of a network of 
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devices and resources via a computer network according to claim 28, wherein the 
lower level settings require the deletion of infected files of said one of the devices. 

30. (Cancelled) 
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